Route Origin Authorization
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
File: AS139587.roa (raw, json)
Hash identifier: f04psP7IZ1UtLGGTxISZArHh6rXPmNj7ijuo9fyd/1M=
Subject key identifier: 98:3E:FD:7D:B4:CB:2D:4B:3B:9A:A6:DD:AB:D1:FE:4B:90:BA:9A:88
Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial: 635FF43A2049126EBFE60BFC57A341E100D60A18
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
Signing time: Tue 26 May 2026 16:30:32 +0000
ROA not before: Tue 26 May 2026 16:25:32 +0000
ROA not after: Tue 25 May 2027 16:30:32 +0000
asID: 139587
IP address blocks: 1.193.188.0/24 maxlen: 24
1.193.212.0/24 maxlen: 24
1.193.219.0/24 maxlen: 24
1.194.24.0/21 maxlen: 21
1.194.114.0/23 maxlen: 23
1.194.160.0/20 maxlen: 20
1.194.160.0/24 maxlen: 24
1.194.161.0/24 maxlen: 24
1.194.162.0/23 maxlen: 23
1.194.166.0/24 maxlen: 24
1.194.167.0/24 maxlen: 24
1.194.172.0/24 maxlen: 24
1.194.173.0/24 maxlen: 24
1.194.174.0/23 maxlen: 23
1.194.192.0/20 maxlen: 20
1.194.192.0/22 maxlen: 22
1.194.196.0/24 maxlen: 24
1.194.199.0/24 maxlen: 24
1.194.200.0/24 maxlen: 24
1.194.205.0/24 maxlen: 24
1.194.206.0/24 maxlen: 24
1.194.207.0/24 maxlen: 24
1.194.208.0/22 maxlen: 22
1.194.208.0/24 maxlen: 24
1.194.210.0/23 maxlen: 23
1.194.216.0/21 maxlen: 21
1.194.216.0/23 maxlen: 23
1.194.218.0/23 maxlen: 23
1.194.220.0/24 maxlen: 24
1.194.221.0/24 maxlen: 24
1.194.222.0/24 maxlen: 24
1.194.223.0/24 maxlen: 24
1.195.200.0/21 maxlen: 21
1.195.200.0/24 maxlen: 24
1.195.201.0/24 maxlen: 24
1.195.202.0/24 maxlen: 24
1.195.204.0/24 maxlen: 24
1.195.206.0/24 maxlen: 24
36.99.112.0/24 maxlen: 24
123.54.192.0/23 maxlen: 23
123.54.196.0/23 maxlen: 23
123.54.199.0/24 maxlen: 24
123.54.202.0/23 maxlen: 23
123.54.204.0/24 maxlen: 24
123.54.208.0/23 maxlen: 23
123.54.210.0/24 maxlen: 24
123.54.212.0/24 maxlen: 24
123.54.214.0/23 maxlen: 23
123.54.216.0/24 maxlen: 24
123.149.169.0/24 maxlen: 24
240e:b:e000::/40 maxlen: 40
240e:23d::/36 maxlen: 36
240e:23d:1000::/36 maxlen: 36
240e:23d:2000::/36 maxlen: 36
240e:23d:3000::/36 maxlen: 36
240e:93c:1000::/36 maxlen: 36
240e:981:e300::/40 maxlen: 40
240e:981:e400::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:5f:f4:3a:20:49:12:6e:bf:e6:0b:fc:57:a3:41:e1:00:d6:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Validity
Not Before: May 26 16:25:32 2026 GMT
Not After : May 25 16:30:32 2027 GMT
Subject: CN=983EFD7DB4CB2D4B3B9AA6DDABD1FE4B90BA9A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:06:21:25:da:e6:03:26:8e:5f:5a:14:91:
ec:88:1d:f1:50:ac:9e:ac:67:d7:db:7f:45:d8:a9:
f3:f1:00:6e:af:10:2e:90:a6:d1:7c:a7:3e:9e:8c:
e3:94:9f:a4:ad:43:a4:9d:30:d8:c3:51:d8:49:19:
18:42:b8:46:da:8b:97:b7:6d:70:27:c1:be:b5:b0:
89:a9:05:f7:9f:d0:19:c2:6d:b6:1b:e0:d3:57:b5:
79:2f:da:0b:b8:5c:9f:80:d3:12:de:df:95:ab:8d:
6a:ee:7d:ba:45:27:30:4d:e3:05:28:fc:c8:60:25:
45:0e:70:bc:99:6e:91:4b:0c:f4:ce:30:16:e8:88:
a9:bc:b3:2a:0f:85:e9:4e:fc:50:bf:47:31:ee:4c:
1f:06:68:21:63:96:da:17:87:de:e2:e9:29:41:83:
7e:7b:a0:28:9c:d3:09:03:c0:00:ec:e1:27:12:f1:
4c:1f:d9:c2:38:c7:11:40:c6:86:14:90:88:84:01:
1d:1c:7d:a7:09:c7:7d:34:4f:eb:9f:a5:b0:64:44:
18:c1:4a:91:63:d2:39:b3:e7:4e:94:6d:81:36:b2:
68:3e:7a:32:f9:7f:42:32:79:2b:14:31:04:b9:97:
68:37:7b:84:30:df:4d:63:3c:2f:71:f6:09:c9:db:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3E:FD:7D:B4:CB:2D:4B:3B:9A:A6:DD:AB:D1:FE:4B:90:BA:9A:88
X509v3 Authority Key Identifier:
keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/AS139587.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.193.188.0/24
1.193.212.0/24
1.193.219.0/24
1.194.24.0/21
1.194.114.0/23
1.194.160.0/20
1.194.192.0-1.194.211.255
1.194.216.0/21
1.195.200.0/21
36.99.112.0/24
123.54.192.0/23
123.54.196.0/23
123.54.199.0/24
123.54.202.0-123.54.204.255
123.54.208.0-123.54.210.255
123.54.212.0/24
123.54.214.0-123.54.216.255
123.149.169.0/24
IPv6:
240e:b:e000::/40
240e:23d::/34
240e:93c:1000::/36
240e:981:e300::-240e:981:e401:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
41:ec:36:7e:94:4e:01:27:3d:30:38:3d:fd:29:f4:a0:3b:9d:
c4:e8:9d:9c:cc:22:0e:62:7a:d4:4e:d6:f7:37:2f:e2:65:db:
04:82:a8:ae:1a:ba:02:60:81:89:e8:af:d1:2e:31:39:35:7f:
03:6a:e9:e7:f8:92:f6:3e:06:81:22:e5:49:c6:79:4d:79:0e:
a5:48:f0:5f:1b:bf:70:76:10:27:2a:4c:b9:d1:a8:a9:18:ea:
95:4b:3d:90:a6:cf:29:da:b2:00:92:a5:94:78:17:6c:17:2d:
d7:77:2d:64:ae:de:fe:5e:28:81:4d:7c:a8:8a:3e:26:52:aa:
e7:a4:22:3e:d3:c9:08:90:37:cc:94:2b:e2:fb:34:c1:74:c3:
d2:4a:11:1b:4a:47:5f:f5:1a:7c:1a:e0:92:b3:f4:b6:c3:32:
d1:c8:c0:7e:8d:d0:b4:13:6a:63:98:70:3f:62:00:9e:0c:1e:
46:a4:a5:68:f5:59:9c:c9:57:07:20:c0:69:03:df:e2:1e:be:
c9:f1:bb:fd:00:e1:0c:c7:cd:eb:ed:d3:5c:cb:64:15:eb:05:
c6:1c:3f:6b:0a:73:77:a3:7a:07:70:59:53:64:de:d0:a7:e1:
3c:b7:60:68:e9:c0:6f:ae:70:de:00:b7:33:ea:cc:a9:34:5a:
e2:ba:fa:60
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIUY1/0OiBJEm6/5gv8V6NB4QDWChgwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz
NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUyNjE2MjUzMloX
DTI3MDUyNTE2MzAzMlowMzExMC8GA1UEAxMoOTgzRUZEN0RCNENCMkQ0QjNCOUFB
NkREQUJEMUZFNEI5MEJBOUE4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMXFBiEl2uYDJo5fWhSR7Igd8VCsnqxn19t/Rdip8/EAbq8QLpCm0XynPp6M
45SfpK1DpJ0w2MNR2EkZGEK4RtqLl7dtcCfBvrWwiakF95/QGcJtthvg01e1eS/a
C7hcn4DTEt7flauNau59ukUnME3jBSj8yGAlRQ5wvJlukUsM9M4wFuiIqbyzKg+F
6U78UL9HMe5MHwZoIWOW2heH3uLpKUGDfnugKJzTCQPAAOzhJxLxTB/ZwjjHEUDG
hhSQiIQBHRx9pwnHfTRP65+lsGREGMFKkWPSObPnTpRtgTayaD56Mvl/QjJ5KxQx
BLmXaDd7hDDfTWM8L3H2CcnbuckCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBSYPv19
tMstSzuapt2r0f5LkLqaiDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ
HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx
ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw
Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjBeBggrBgEFBQcBCwRSMFAwTgYIKwYBBQUH
MAuGQnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NzA5OTQwMjkw
NTk3NjgzNS8xL0FTMTM5NTg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MIHcBggrBgEFBQcBBwEB/wSBzDCByTCBkwQCAAEwgYwDBAABwbwDBAABwdQDBAAB
wdsDBAMBwhgDBAEBwnIDBAQBwqAwDAMEBgHCwAMEAgHC0AMEAwHC2AMEAwHDyAME
ACRjcAMEAXs2wAMEAXs2xAMEAHs2xzAMAwQBezbKAwQAezbMMAwDBAR7NtADBAB7
NtIDBAB7NtQwDAMEAXs21gMEAHs22AMEAHuVqTAxBAIAAjArAwYAJA4AC+ADBgYk
DgI9AAMGBCQOCTwQMBEDBgAkDgmB4wMHASQOCYHkADANBgkqhkiG9w0BAQsFAAOC
AQEAQew2fpROASc9MDg9/Sn0oDudxOidnMwiDmJ61E7W9zcv4mXbBIKorhq6AmCB
ieiv0S4xOTV/A2rp5/iS9j4GgSLlScZ5TXkOpUjwXxu/cHYQJypMudGoqRjqlUs9
kKbPKdqyAJKllHgXbBct13ctZK7e/l4ogU18qIo+JlKq56QiPtPJCJA3zJQr4vs0
wXTD0koRG0pHX/UafBrgkrP0tsMy0cjAfo3QtBNqY5hwP2IAngweRqSlaPVZnMlX
ByDAaQPf4h6+yfG7/QDhDMfN6+3TXMtkFesFxhw/awpzd6N6B3BZU2Te0KfhPLdg
aOnAb65w3gC3M+rMqTRa4rr6YA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:41 2026 by rpki-client